xnu/security/mac_vfs.c

300 mac_vnode_label_associate(struct mount *mp, struct vnode *vp, vfs_context_t ctx)
317 		error = mac_vnode_label_associate_fdesc(mp, fnp, vp, ctx);
363 mac_vnode_notify_create(vfs_context_t ctx, struct mount *mp,
370 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
373 	cred = vfs_context_ucred(ctx);
381 mac_vnode_notify_rename(vfs_context_t ctx, struct vnode *vp,
387 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
390 	cred = vfs_context_ucred(ctx);
396 mac_vnode_notify_open(vfs_context_t ctx, struct vnode *vp, int acc_flags)
401 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
404 	cred = vfs_context_ucred(ctx);
434 mac_vnode_label_store(vfs_context_t ctx, struct vnode *vp,
441 	    !mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
444 	cred = vfs_context_ucred(ctx);
451 mac_cred_label_update_execve(vfs_context_t ctx, kauth_cred_t new, struct vnode *vp,
464 	cred = vfs_context_ucred(ctx);
472 mac_cred_check_label_update_execve(vfs_context_t ctx, struct vnode *vp,
481 	cred = vfs_context_ucred(ctx);
489 mac_vnode_check_access(vfs_context_t ctx, struct vnode *vp,
497 	    !mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
500 	cred = vfs_context_ucred(ctx);
508 mac_vnode_check_chdir(vfs_context_t ctx, struct vnode *dvp)
514 	    !mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
517 	cred = vfs_context_ucred(ctx);
523 mac_vnode_check_chroot(vfs_context_t ctx, struct vnode *dvp,
530 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
533 	cred = vfs_context_ucred(ctx);
539 mac_vnode_check_create(vfs_context_t ctx, struct vnode *dvp,
546 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
549 	cred = vfs_context_ucred(ctx);
555 mac_vnode_check_unlink(vfs_context_t ctx, struct vnode *dvp, struct vnode *vp,
562 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
565 	cred = vfs_context_ucred(ctx);
572 mac_vnode_check_deleteacl(vfs_context_t ctx, struct vnode *vp,
579 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
582 	cred = vfs_context_ucred(ctx);
589 mac_vnode_check_deleteextattr(vfs_context_t ctx, struct vnode *vp,
596 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
599 	cred = vfs_context_ucred(ctx);
604 mac_vnode_check_exchangedata(vfs_context_t ctx,
611 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
614 	cred = vfs_context_ucred(ctx);
623 mac_vnode_check_getacl(vfs_context_t ctx, struct vnode *vp, acl_type_t type)
629 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
632 	cred = vfs_context_ucred(ctx);
639 mac_vnode_check_getattrlist(vfs_context_t ctx, struct vnode *vp,
646 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
649 	cred = vfs_context_ucred(ctx);
657 mac_vnode_check_exec(vfs_context_t ctx, struct vnode *vp,
666 	cred = vfs_context_ucred(ctx);
675 mac_vnode_check_fsgetpath(vfs_context_t ctx, struct vnode *vp)
681 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
684 	cred = vfs_context_ucred(ctx);
704 mac_vnode_check_getacl(vfs_context_t ctx, struct vnode *vp, acl_type_t type)
710 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
713 	cred = vfs_context_ucred(ctx);
720 mac_vnode_check_getextattr(vfs_context_t ctx, struct vnode *vp,
727 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
730 	cred = vfs_context_ucred(ctx);
737 mac_vnode_check_ioctl(vfs_context_t ctx, struct vnode *vp, u_int cmd)
743 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
746 	cred = vfs_context_ucred(ctx);
752 mac_vnode_check_kqfilter(vfs_context_t ctx, kauth_cred_t file_cred,
759 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
762 	cred = vfs_context_ucred(ctx);
770 mac_vnode_check_link(vfs_context_t ctx, struct vnode *dvp,
777 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
780 	cred = vfs_context_ucred(ctx);
787 mac_vnode_check_listextattr(vfs_context_t ctx, struct vnode *vp)
793 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
796 	cred = vfs_context_ucred(ctx);
802 mac_vnode_check_lookup(vfs_context_t ctx, struct vnode *dvp,
809 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
812 	cred = vfs_context_ucred(ctx);
818 mac_vnode_check_open(vfs_context_t ctx, struct vnode *vp, int acc_mode)
824 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
827 	cred = vfs_context_ucred(ctx);
833 mac_vnode_check_read(vfs_context_t ctx, struct ucred *file_cred,
840 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
843 	cred = vfs_context_ucred(ctx);
851 mac_vnode_check_readdir(vfs_context_t ctx, struct vnode *dvp)
857 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
860 	cred = vfs_context_ucred(ctx);
866 mac_vnode_check_readlink(vfs_context_t ctx, struct vnode *vp)
872 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
875 	cred = vfs_context_ucred(ctx);
881 mac_vnode_check_label_update(vfs_context_t ctx, struct vnode *vp,
888 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
891 	cred = vfs_context_ucred(ctx);
898 mac_vnode_check_rename_from(vfs_context_t ctx, struct vnode *dvp,
905 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
908 	cred = vfs_context_ucred(ctx);
915 mac_vnode_check_rename_to(vfs_context_t ctx, struct vnode *dvp,
922 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
925 	cred = vfs_context_ucred(ctx);
932 mac_vnode_check_revoke(vfs_context_t ctx, struct vnode *vp)
938 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
941 	cred = vfs_context_ucred(ctx);
947 mac_vnode_check_searchfs(vfs_context_t ctx, struct vnode *vp, struct attrlist *alist)
953 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
956 	cred = vfs_context_ucred(ctx);
962 mac_vnode_check_select(vfs_context_t ctx, struct vnode *vp, int which)
968 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
971 	cred = vfs_context_ucred(ctx);
978 mac_vnode_check_setacl(vfs_context_t ctx, struct vnode *vp, acl_type_t type,
985 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
988 	cred = vfs_context_ucred(ctx);
995 mac_vnode_check_setattrlist(vfs_context_t ctx, struct vnode *vp,
1002 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1005 	cred = vfs_context_ucred(ctx);
1011 mac_vnode_check_setextattr(vfs_context_t ctx, struct vnode *vp,
1018 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1021 	cred = vfs_context_ucred(ctx);
1028 mac_vnode_check_setflags(vfs_context_t ctx, struct vnode *vp, u_long flags)
1034 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1037 	cred = vfs_context_ucred(ctx);
1043 mac_vnode_check_setmode(vfs_context_t ctx, struct vnode *vp, mode_t mode)
1049 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1052 	cred = vfs_context_ucred(ctx);
1058 mac_vnode_check_setowner(vfs_context_t ctx, struct vnode *vp, uid_t uid,
1065 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1068 	cred = vfs_context_ucred(ctx);
1074 mac_vnode_check_setutimes(vfs_context_t ctx, struct vnode *vp,
1081 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1084 	cred = vfs_context_ucred(ctx);
1091 mac_vnode_check_stat(vfs_context_t ctx, struct ucred *file_cred,
1098 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1101 	cred = vfs_context_ucred(ctx);
1108 mac_vnode_check_truncate(vfs_context_t ctx, struct ucred *file_cred,
1115 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1118 	cred = vfs_context_ucred(ctx);
1126 mac_vnode_check_write(vfs_context_t ctx, struct ucred *file_cred,
1133 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1136 	cred = vfs_context_ucred(ctx);
1143 mac_vnode_check_uipc_bind(vfs_context_t ctx, struct vnode *dvp,
1150 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1153 	cred = vfs_context_ucred(ctx);
1159 mac_vnode_check_uipc_connect(vfs_context_t ctx, struct vnode *vp)
1165 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1168 	cred = vfs_context_ucred(ctx);
1174 mac_vnode_label_update(vfs_context_t ctx, struct vnode *vp, struct label *newlabel)
1176 	kauth_cred_t cred = vfs_context_ucred(ctx);
1198 mac_mount_label_associate(vfs_context_t ctx, struct mount *mp)
1200 	kauth_cred_t cred = vfs_context_ucred(ctx);
1247 mac_mount_check_mount(vfs_context_t ctx, struct vnode *vp,
1254 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1257 	cred = vfs_context_ucred(ctx);
1264 mac_mount_check_remount(vfs_context_t ctx, struct mount *mp)
1270 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1273 	cred = vfs_context_ucred(ctx);
1280 mac_mount_check_umount(vfs_context_t ctx, struct mount *mp)
1286 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1289 	cred = vfs_context_ucred(ctx);
1296 mac_mount_check_getattr(vfs_context_t ctx, struct mount *mp,
1303 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1306 	cred = vfs_context_ucred(ctx);
1312 mac_mount_check_setattr(vfs_context_t ctx, struct mount *mp,
1319 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1322 	cred = vfs_context_ucred(ctx);
1328 mac_mount_check_stat(vfs_context_t ctx, struct mount *mount)
1334 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1337 	cred = vfs_context_ucred(ctx);
1344 mac_mount_check_label_update(vfs_context_t ctx, struct mount *mount)
1350 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1353 	cred = vfs_context_ucred(ctx);
1360 mac_mount_check_fsctl(vfs_context_t ctx, struct mount *mp, u_int cmd)
1366 		!mac_context_check_enforce(ctx, MAC_VNODE_ENFORCE))
1369 	cred = vfs_context_ucred(ctx);
1446     struct vnode *vp, vfs_context_t ctx)
1461 		MAC_PERFORM(vnode_label_associate_file, vfs_context_ucred(ctx),
1466 	p = vfs_context_proc(ctx);
1488 			    vfs_context_ucred(ctx), (socket_t)so, so->so_label,
1493 		pshm_label_associate(fp, vp, ctx);
1496 		psem_label_associate(fp, vp, ctx);
1506 		MAC_PERFORM(vnode_label_associate_pipe, vfs_context_ucred(ctx),
1513 		MAC_PERFORM(vnode_label_associate_file, vfs_context_ucred(ctx),